www.lonque.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:50:35:d4:dd:ea:1a:ba:e7:f5:9d:56:80:eb:b1:31:52 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lonque.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:50:35:d4:dd:ea:1a:ba:e7:f5:9d:56:80:eb:b1:31:52
Serial Number (int): 317590066086084593723840240718401506455890
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:0c:fc:2a:11:4e:0c:1e:cf:1b:39:e0:f1:65:92:97:04:4f:62:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:8b:2f:46:24:4e:f8:3a:34:a2:74:fd:ca:d2:6a:1d:3d:c0:4d:96
Fingerprint (sha256): 56:b6:f2:ba:86:17:9d:dd:44:76:eb:a3:69:4d:c0:9b:59:a7:e2:e0:eb:f2:64:3f:f7:86:31:27:30:2b:f1:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lonque.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lonque.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lonque.nl
www.lonque.nl

Other certificates including the domain name lonque.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lonque.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317590066086084593723840240718401506455890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-04 05:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 05:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lonque.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832993693100395797366134468731243444844867108129308674202404500419062887208777868694883605159089699858767394746642378068175201772318874709834322948206710441865342673526066468079379970496458184025396170309503875308156669165757755220342271517127697839890615802066947389794133542250462688476124918864522939972532797489425661264226113730987984758155937709598382762939668043593349988321038746808685461522146833838755133007971069604219348898460056280178539184592022671521873080730843499870839001754056180057136175814138328339199566977093079446708555615215800852268524791438893342199158127564864414748336876791901367154711164162578296761441861268231910127481304684646758487571921892629405747211475269019860906989346303847148126477429979269937157362343727577669570270487075293547765513912175441951841993776976221646108105828669908365210470565324757305479600690964631514301933223950607732963089168272996176505131439390435660044373936970109363585965058062715080580914465299273804053662257369206058299485509036205919826738418914729671137936494886597059623417492574491822143480787441587553297332126052263142504084437919008423344384619845367926128311782809725501581754655375616138197889182758073174755695629585557756693824552656759360379331720487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e20cfc2a114e0c1ecf1b39e0f1659297044f6289
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonque.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lonque.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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